We are seeking an experienced DevSecOps Lead Specialist to drive secure DevOps practices, oversee CI/CD automation, and ensure the development and deployment pipeline meets enterprise-grade security standards. This role requires a hands-on technical leader with deep expertise in DevOps engineering, cloud security, application security, and infrastructure automation. The ideal candidate will collaborate with development, infrastructure, security, and compliance teams to implement and enforce security controls across the software delivery lifecycle.
-
Lead the implementation and optimization of DevSecOps practices across the enterprise.
-
Architect, design, and maintain secure CI/CD pipelines integrating automated security tools.
-
Drive security automation for code scanning, container security, secret management, and vulnerability management.
-
Collaborate with engineering and security teams to embed security requirements early in the development lifecycle.
-
Implement security controls and policies for cloud-native environments and container orchestration platforms.
-
Monitor, analyze, and respond to security vulnerabilities across applications and infrastructure.
-
Provide leadership in incident response, risk analysis, and remediation planning.
-
Evaluate and integrate new DevSecOps tools and frameworks to strengthen security posture.
-
Train development teams on secure coding, DevSecOps best practices, and threat awareness.
-
Produce technical documentation, security compliance reports, and architectural standards.
-
Ensure adherence to regulatory, compliance, and governance frameworks.
-
12+ years of overall IT experience including DevOps, Cloud Engineering, and Security.
-
Proven experience leading enterprise-scale DevSecOps initiatives.
-
Strong expertise with CI/CD tools such as Jenkins, GitLab CI, GitHub Actions, Azure DevOps, or Bamboo.
-
Hands-on experience with cloud platforms such as AWS, Azure, or GCP.
-
Practical knowledge of containerization and orchestration tools (Docker, Kubernetes, OpenShift).
-
Experience with infrastructure as code tools including Terraform, Ansible, or CloudFormation.
-
Deep understanding of application security concepts, OWASP, secure coding, and threat modeling.
-
Experience with automated security tools such as SonarQube, Snyk, WhiteSource, Checkmarx, Fortify, Aqua, Prisma Cloud, or Qualys.
-
Strong knowledge of logging, monitoring, SIEM, and observability platforms.
-
Familiarity with identity and access management, secrets management, and zero-trust frameworks.
-
Ability to lead cross-functional teams and communicate complex technical concepts clearly.
-
Relevant certifications are a plus (CISSP, CISM, CEH, OSCP, AWS Security, Azure Security, Kubernetes).